Outbound Bidirectional Nat Configuration Example - HP FlexNetwork MSR2003 Configuration Manual

Flexnetwork msr router series
Hide thumbs Also See for FlexNetwork MSR2003:
Table of Contents
Inbound interface: GigabitEthernet2/0/2
State: ICMP_REPLY
Application: INVALID
Start time: 2012-08-15 14:53:29
Initiator->Responder:
Responder->Initiator:
Total sessions found: 1

Outbound bidirectional NAT configuration example

Network requirements
As shown in
private network 192.168.1.0/24. The company has two public IP addresses 202.38.1.2 and
202.38.1.3. Configure NAT to allow internal users to access the external Web server by using the
server's domain name.
Figure 65 Network diagram
Requirements analysis
To meet the network requirements, you must perform the following tasks:
Configure inbound dynamic NAT with ALG to make sure the internal host reaches the Web
server instead of another internal host. NAT with ALG can translate the Web server's IP address
in the DNS reply payload to a dynamically assigned public address.
Configure outbound dynamic NAT to translate the source IP address of packets from an internal
host to a dynamically assigned public address.
Add a static route to the public IP address of the external Web server.
Configuration procedure
# Specify IP addresses for the interfaces on the router. (Details not shown.)
# Enable NAT with ALG and DNS.
system-view
[Router] nat alg dns
# Configure ACL 2000, and create a rule to permit packets only from subnet 192.168.1.0/24 to pass
through.
[Router] acl basic 2000
[Router-acl-ipv4-basic-2000] rule permit source 192.168.1.0 0.0.0.255
[Router-acl-ipv4-basic-2000] quit
Figure
65, the private network where the Web server resides overlaps with the company
TTL: 12s
1 packets
84 bytes
1 packets
84 bytes
144

Hide quick links:

Table of Contents
loading

Table of Contents